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ORGANISATION OP H.Q. , OP GEN. PER N.A. 
(= Director General of Geraan Sigint) 


TIOOM/I-I 6 O 


Situation at Middle of, March 45 


Gen. d. N.A: 


Ob ers t Boetzel 


Section 1. 


-- - 1 

Section 2 . j 

Section 3 

Section 4 

Section 5 

Section 6 


Section 1Signals Cpinmuhications (Officer Responsible for Signals 
. . Routine) , 

(in this Section was Aiiitmann Bodenmueller) 

Section 2j- Evaliiation "Rest " 

i/Cj Section; . Hauptmann Thiele (or Thiel) 

Oharir.spoktor Sernatinger 
Oberihspektor Chiske 
Oberinspektor Buchfelder 

Section 3:- Evaluation " East." ■ ■; 

i/C Section; Hauptmann Gorzolla (or similar name) 

Section 4:- Cryptanalysis • • 

For detailed organisation see below 

Section 5:~ Captured material -. obtaining books and data. - maps 
.I/O Section: Amtmahn Block 

Section 6:- Unknown ' . ' ’ 4 ' 

At . the date in question, the Section was. in the 
neighbourhood -of Stuttgart . 

Section Z;- Personnel matters 


Organisation of Section 4 

(Cryptanalysis) 1 


~ !7G Section 

Major Dr. Hentze 


Main Section 1 . Analytical work and work on machine ciphers . 

Head of Main Section:- Regierungsbaurat. Dr. Pietsch 

Sub-Section a - Analysis 

Work on specially difficult systems 
Head:- •Regierungsbaurat•Marquardt 
' Deputy:- Wachtmeister Hillburg 
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Sub-Section b ’ - Machines 

Work on all cipher machines' 

Head:- Wachtmeister Doering 

" 'Deputy:- Wachtmeister'Buggisch (till about Nov.44) 

later - Wachtmeister Valentin ' 

Main Section 2 Cryptanalysis "West" 

Head of Main Section:- Oberleutnant Kneschke- 

(previously Ober-Regierungsrat Bailovic - till Oct.44) 
[Bailovic was transferred to K.Q. OKW/Chi] 

Sub-Section a - . U.S.A. 

Great Britain 
Sweden 

Head:- Regierungsbaurat Dr. 'Werner Schulz » 

Deputy:- Wachtmeister Schanz (?) 

(Previously U.S.A .)) . Slib . Seotion * 

Sweden) ■ 

I * 

Great Britain one Sub-Section** ) 

Sub-Section b - Prance ■ 

Spain ) were no longer ’worked on. 
Portugal ) Volume of traffic was always 
Brazil ) extremely small and thus 
Switzerland) unimportant. 

, Head;- Oberinspektor Otto Kuehn*** 

(previously Sonderfuehrer (z) Hans- 
Wolfgang Kuehn - from 1941-Feb.1945) 
Deputy:- Wachtmeister Max Homiokel 

Sub-Section '6 - Balkan Countries 

. , Head;- Oberleutnant Kneschke 

(previously Sonderfuehrer (z) Geisler 
' previously 0.Reg.Rat Bailovic) 

Deputy:- Wachtmeister Esterhatzio 
, i (name might be spelt EsterhAzy) 


Head.:- Regierungsbaurat Steinberg (transferred to H.Q. Chi/OKW) 

Deputy:- Unteroffizier Lucius 

Head:- Oberinspektor Zillmann (later-in another Section of G-eh.d.N.A;) 
Deputy:- Dr. Schulz “ 

i. 

'* Oberinspektor Otto Kuehn was previously in charge of the Main Section 
"Training". “Associated with thi3 were the' e xamin ation, selection, and- 
training of cryptanalysts. Freni the middle of March 1945, the training 
section was incorporated in the French Section. Before and-at the 
beginning of the war, Oberinspektor Otto Kuehn was in charge of the 
French Section. 1 
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Maia Section 3 • Cryptanalysis "East” - Russian, to some extent Poland 

.. Head:- Leutriant Dettmahn - 
" (before him Oberleutnant Schubert.. 

. . before him Sonderfuehrer (K) Bleschke) 

a) N.K.V.D. traffics "(?) Leutnant Dettmann 

b) Inspektor Torunsky 

°) . ; Wachtmeister- Fuohs. 

Main Section 4 ...Hollerith Section and workshops ; 

• Head:- Regierungsbaurit Sohonke . . ’ ' 

The main depot was at Erfurt 
There was a sub-depot at Weimar 

. I do not know whether there was still a possibility of 
a change of location and whether such a move was 
actually carried out at. the beginning, of April 1545. 

i/C. Workshop :,r Inspektor Sohuessler y 

(Erfurt) 

Main Section (z) Personnel Matters 

Head:- Inspektor EJtrahlendorff 



Under the command of Gen.d.N.A. were the Sigint Commanders* 

In service in the -East (as far as I know) were:- Commander'1 

Commander 2 
Commander 5 

In'service in the West were:- • . ' ■ . : 


Commander. 6 in the northern part of the western front 

Unit Commander :- Major. Lechner 
■ I/C Cryptanalysis :-.' Eeutnant von Demfsr 



Very recently, (exact date '^unknown) the .following were set up:- 
Senior Commander Sigint East . 

O.C.Unknown ; . 

and Senior Commander Sigint West ’ :. . ■ ” ' 

t ‘ 

O.C,:- Oberst Kopp or Kiiop (or similar name) 

- I do not know whether this new organisation oame .into full use. This 
reorganisation was. not supposed to make any difference to the direct 
contact between the head of Section 4 (Cryptanalysis) and the officers 
i/o Cryptanalysis of the Commanders. 
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Commander 5 in the southern part' of the western.front 


Unit Comman der; - , Major Marquard 

I/C Cryptanalysis :- Oberleutnant Schl'emmer 

Commander 7 - Italian, front ' 

Unit Commander :- Oberstleutnant Sesnueller 
I/C.Cryptanalysis :- Hauptmann Mueller 


Prom Januaiy 1941 on, the actual date of establishment'of the 
Cryptanalysis-Section, the Section was under OKH/In 7, It was not put 
under the command of Gen.d.N.A. till February 1945. ' • • 

Heads of the Section were:- . - 

' • 

Major Hang 
.Major Mettig 
Major Lechner 

Major Dr. Hentze ■' 


As far as I know, .there was in the army before the war only a 
cryptanalytic section for Prance, Russia and Poland. All other departments 
were only created during the war. Army cipher systems are said to have been 
handled by OKW/chi. > 



160 
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FREUCH CIPHER SYSTEMS (’ARMY) 
) . ” 

Frenoh Machines 


o' 

<** 


French. "C . ?<? "■ Mach ine. This machine was worked on and frequently 
broken in Wm. Doering's- machine section. As far as I know and 
oan judge, the content was moderate to good, but mostly too old. 

French "B 211" Machine - 1 This machine was worked on in Wm. 1 
Doering's machine section without the slightest success. This 
machine .was pronounced unbreakable by Doering and his oolleagues.- 

French |: BG 33" Ma chin e. This'machine was worked on in Wm. Doering's 
machine section, 'According to reports, only messages with the • 
same or nearly the same indicator group were breakable. . Under 
favourable circumstances the appropriate day's traffic could be. 
broken from this. Such compromises were very rare. They were 
.of no particular importance as the messages broken .were too, old. 


French Cipher Systems Previously Used 


4. 5/L Systems . Simple transposition 

, 10-daily- key-chonge ‘ 
appeared about June, July, August,. 1943 in Tunisia., 

Content .insignificant , •*, 

3/P Systaa . Code table. r , 

. Fortnightly key-charge 

Appeared from about 1942'to middle of 1944 in Syria - not -inter¬ 
cepted after this. 

Content - as far as I know and am capable-of Judging - moderate 
to good. l 

k ' . ' '■ - . 

6. 3/L System . Code table 

Fortnightly key-change ' 

Appeared roughly 1943 to middle of 1944 - not intercepted after 
that - Syria. • 

Same system as that-mentioned in para. 5-' 

Content- - technical details of .wireless traffio. : Sometimes it 
passed the weekly changing call-signs.. . ... 

7- In Syria there'were also used a number of quite simple systems of - 
rare occurrence 

a) a frequently changing 2 /f substitution table (with alter¬ 

native equivalents) . . ,' 1 

b) a simple transposition 
Content - police matters 

8. 4/F System . ' 4-/F code table • 

Daily key-change, "but the same each month? (?) 

Appeared 1944 in the Syrian obastal network ■ ■ j 

Content - ship movements in-, coastal area. 
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Current .French Systems 

' » *— 

9* 5/L Message s. Diagonal transpositions. . ,, \ 

Formerly a monthly - lately a fortnightly key-change \ 

1943(?) -1944 - 1945 ■ 

' . West Africa , , • | 

As far as content was concerned, only the strength returns j 
; were important., ‘ • J 

10. ' TT§F. ij/Ti Messages; . 4/f coda. reciphered by means of a 
■ letter aobdtlfa&ion tail e , 

1944 - 1945 

France (?) and north Africa . . 

Content. traffic-routine messages 

5/L Me ssag es. ■ Diagonal transpositi'en 

1“45 ”, 13‘4 •- -1945.(1'} » • 

^jC- Equatorial Africa 

Content - -little importance 

12. , 5/F Messag es. 4/F cod'e - hatted ... .-.. 

1 A.T.II. 43 "" , x ' 

' . 1943'- 1944 -1945 

North Africa - Oofs :k5e. 

Content - good (,'j.t that'time it concerned .troop movenerits'- 
to North Africa (coming from West Africa)] 

13. 4/F Messages . 4/F- code with' subtracter 

1944 - 1945 

for a short time - Italian front 
later - Mother country , 

14. 3/f Messages . 4/F code with subtractor - 

/ 1944 - (1945 very slight, unimportant and irregular traffic) - 

transport network - North Africa'. 

A System Still Used but Unbroken when I left OKH 

15. " 5/F Me s sages • 

i943T?T r 1944 - 1945 . 

France - North Africa - West\Africa <- Equatorial Africa 


Description of Frenoh 'Cipher Systems with Details of ''''— -. 

Experience acquired in Breaking that . . 

The French machine.systems (of, page 6 under Nos. 1 to 3) were without 
exception handled in the machine section under Wachtmeister Doering, I am- 
therefore unable to give more exact details of working methods. .Doering's 
colleagues were very carefully•selected brains, men who were engineers or 
mathematicians in oivil life. 

The system mentioned on page 6, under No. 4, came up suddenly - had 
only a short - period of validity - was of little content value - was little 
used. We can easily dispense with a description of the breaking; process, 
You get the clear text by sliding ((sections of)) the cipher text, against 
one another, later called Just "sliding" for short. 
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The mentioned on page 6, under Ho. 5,' is a small 3/L code, table, 

composed of several parts. 



The construction of the ; 
code-table could be 
represented as shown in 
the diagram. 

The individual code 
equivalent is read off 
in-the following order:- 
column, .section,.row. 

The. strips (columns arid 
rows) dc not contain 
the whole alphabet. ’ ■ 

The cede table is 
arranged alphabetically.- 
The numbers are in their 
natural order in the 
code. The recovery of 
the code presented no 
great difficulty - as 
stereotyped beginnings 
came up very often, 
these being addresses 
with name of station 
and location. In 
these, place names 
were usually spelt out, 
which made the recovery 
of the code still 
easier. 


Example of a stereotyped message beginning:- 

. , TELE f - 'K - A - ME - CH- - LI - E, - ,A - TELE - A - EB - P - STOP 
iy !-* r< f—< t-< /->’ /—, 

or TELE, - , A - HS - P - A, - ,TEffi - \Sk - MA. - 3, 

and similar beginnings-. 

Later, oode reoovery would have come up against considerably greater 
difficulties a3 the French introduced frequently changing 3/L cover groups 
for the-names of stations and-the most important place-names. 


The key-changes carried out might be pictured as pasting new strips 
over the old ones. 


The system described on page 6, under Ho. 6, is a traffic-routine -code 
identical in its entire construction to the system mentioned under Wo. 5.‘ 
The vocabulary is more adapted to wireless traffic: 


For simplicity’s sake I can dispense with any further notes on the 
system described on page 6, under No. 7- 

■0ft~ . ‘ 
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■ The cipher system quoted on page 6, : under No. 8, was not broken in 
OKH but by Obit. Kneschke, at that time with Sigint-Commander 4 in Belgrade. 
I cannot therefore give exact details without special data." 


Strip B 


Strip 

A 


Each compartment of 
Strips A and B con¬ 
tains, a two-digit 
number. So for , 
each code item there 
is produced a 4-digit 
number. ' The 4/P 
oode equivalent was. 
further reciphered 
by means of figure 
substitution tables. 


If my memory continues to.serve me correctly, the figure-substitution 
tables ohanged daily, although in a monthly oyole. 

,J he s y s f em mentioned on.page 7, u nder No. 9, is a diagonal trans- 
position such as must have appeared in the - first world war, according to a 
oaptured description, ana appeared at the beginning of the second world, war' 
in the campaign in the west. - 

. f 

.In the two oases Just.mentioned this diagonal transposition had the ' 
following, characteristics. In front of the cipher groups the following 
figure groups (for example) occurred; ” * 

[1] 00027' [2] 23322. [3] 34043 [4] 12523 

[1] is the message number ■ ■> 

[2] is the indicator group ’ 

A - B - item giving the key word 
0 being a repeat of B 

- , D & E appear only as 00 or 22 or .44 

® re Abdicates no shortening of the keyword. ”22" means shorten 
the keyword by one letter at the. beginning and" one at the end. 

■ . ’ * 

■ "44" shorten the keyword by 2 letters at the beginning and 2 at the end. 

[3] the starting point for diagonals 

[4] number of elSnents 


/ 
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Examplo of Encipherment 

Clear text:- IN EIMKR BRUEHHEEH SPORTHALLB IN KARLSRUHE SIND 
UE8ER HUNDERT VERHAFTETE UNTERUEBRACtEP STOP 

Let the keyword be:r Paul Ambroiae Valery - 10-23-37-45-73- 

Ihe numerical key is:- 12 1 16 8 2 10 4 13 11 7 15 5 17 3 9 6 14 18 

Then the clear text is put in 


4 

m 


SI 

m 

m 

L i4 

5 

3 


7 

"15 

9 

'l3 

1 

7“T“ 

1o 

6 

10 

F 

m 

Kl 

m 

m i 

HU 

mm 

R 

0 

i 

Kl 

RJ 

■a 

mm 

mm 

Kl 

■a 

X 

12 

m 

KU 

Kl 

m 

m 

m 

13 

li 

u 

1E1 

m 


si 

mm 

El 

BM 

18 

I 

«*a 

SI 

■ 

mm 

wm 


.IF 

iTt 

Htf 

BO 

Kl 

m 


Hu 

ysn 


■p 

0 

m 

m 

n 


L 

m 

SI 

S3 

m 

sa 

; A 

Si 

S3 

S3 

13 

B 

n 

E 

s 

i£| 

sa 

n 

U 

Si 

m 

P 

sa 

warm 

lltfi 

' ir 

S3 

Si 

IS 

sa 

sa 

K3 

a 

H 

H 

A 

p 

1? 

E 

T 


mm 

H 

, i 

. E 


Sa 


Kl 

RJ 

A 

0 

, H 

T 

s 

.T 

0 

, 3? 



r-m -. Instructions for reading off diagonals 
—^ Instructions for reading off verticals 
5 diagonals are used. 

let the starting point for the first diagonal be "3". Here tho even 
number diagonals go to the right and the odd number diagonals to the left. 
The remaining letters arc read off vertically beginning immediately to the 
right of the starting point of the diagonals (see the example). 

Starting point of the first diagonals i 

Starting point after the diagonals have been read off \L 

Tho cipher text for the above example with the appropriate indicator 
groups would run as follows 


00027 

23300 

34043 

80080 

mm. 

EEUHfC 

REHfU 

VUIBS 

TESEC, 

ELUTR 

IOSEa 

FTST3 

RLE0A 

EHETI 

TRREN 

BHENE 

IHNiffl 

Pifflk 

SRGNA 

DPSLD 


Decipherment follows the some course, but in reverse. 

To complicate further tho diagonal transposition appearing in West 
Africa, the French introduced letter substitution tables with a monthly 
change for the numerical indicator groups. The indicator groups thus 
transformed were distributed, when they changed each month, the cipher 
text. 
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Suppose the letter substitution table to be;- 


0 

A, 

U, 

W 

1 

P» 

P, 

I 

2 

D, 

B, 

z 


L, 

0 , 

V 

4 

K, 

u 


5 

B, 

Q, 

s 

'£ 

H, 

X 


l 

E, 

G 


8 

J, 

N 


9 

c, 

X, 

T 


After recipheiment by the letter 
substitution table the indicator 
groups used in the above example 
would run:- 

AiiiwzG mam toajcl mm 


If now several messages are compared with one another, the indicator 
groups stand out if there is enough material for comparison. This was, of 
course, only possible by the use of statistical methods. For this purpose 
the first ten and the last five groups were studied statistically. 

Then all first, second etc, groups of the whole material were compared, 
so that the indicator groups could be recognised. Owing to the character¬ 
istic construction of the indicator groups the appropriate substitution 
table can easily be broken. 


An example of a deciphering process will be carried out with the 
diagonal transposition used for Equatorial Africa, The experiences gathered 
in the decipherment of diagonal transposition will likewise be noted there 
(of. pp. 12 and 13 ). 

The system mentioned on page 7, under Mo. 10, is a 4/F code, reciphored 
by letter substitution tables. 

The single figures of the 4/F code are transformed with the aid of the 
letter substitution table into a 4/l> cipher text. The first group in this 
type of message is always "TTSF". Then follavs the cipher text - the last 
group is an indicator group. The first and last places in this group indicate 
the letter substitution table to be used. 

By lining up messages with the same substitution tables, identical code* 
groups or even longish repeats oan be noted. Such longish repeats will 
usually show small gaps - thus letters can be equated with one another. 

In this way the breaking of the letter substitution table is possible. 

^Here, too, frequently recurring stereotyped message beginnings in the 
initial stages made code recovery considerably easier. 

Such stereotyped message beginnings were;- 

Suite votre num6ro. (numbers) 

Suite votre no.. (numbers) 

R&f&renoe notre no. ...... (numbers) 

R6f6rence votre tdlfegraamc nuu&ro. 

Bef. votre . (numbers) 

Num6ro . (numbers) 

Rdponse b votre message ..... 
ate. 


(numbers) 
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, This "TTSF" code was alphabetically constructed. The first code 
equivalents were very quickly obtained from such stereotyped, message 
beginnings. The numbers, which were in numerical order, provided further 
possibilities for building up the code. Lining-up of different indicator 
groups looked very promising from the fact that when the system was intre^ 
"POiNT” early 6Vely meSSase ended witl1 it6m "STOP", "PIM" or lass often 


Next of all a few other items such as PE, A and some names of 
were successfully identified. As far as I can judge, the content 
01 those messages was small. 


mon i-hs 
value 


Later such stereotyped message beginnings and endings were no longer 
to-be seen 


. , The diagonal transposition mentioned on page 7, under Mo. 11, contained, 
chiefly official journey returns, in addition medical reports were sent in 
on this system. 


The external characteristics of the system were;- The first two groups 
are . J ' 1 - thf * follow 5/D groups, the cipher text - the last group is 
again a 5/P group - it is in fact identical with the second 5 /f srroup in its 
first throe digits. 

The first 5/F group is the message number 


The second 5/F group is tho indicator group 


The last 5/F group 

is a check group. 


Example 



00135 63798 

AREEH ..... 

. cipher text geos on ,.... 

***** •••**■ 

BIOKE 63713 



The system was broken, but without it being possible to discover the 
significance of the indicator group. It could'only be established that when 
tho indicator group (i.e, the second 5 /F group) was the Sams, the same keyword 
was also used. 


,, Jto^this systaa there appeared from 2 to 7 diagonals which were fixed by 
the indicator group The diagonals were also read off to right and left. 

As far as X remember, about 600 different indicator groups appeared, of which 
approximately 150 wore; broken by r.y colleagues. 

Work on the system just described went on for a very long time without 
results. Several times the work was interrupted or taken over by other 
cryptanalysts. Finally a lucky chance produced tho solution. A message 
came in containing double letters in its cipher text. 


Example of the breaking process 


Only the cipher text follows - the indicator groups are not taken into 
consideration. 


IAONH 

ETURU 

EUSSH 


RN03M 

IDXEU 

SESNA 


QTTSGR 

.OQOTO 

RG 


NASEX 

ENISSP 


STHTT 

HtXEG- 


LOT1I 

.gepxG 
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On the basis of the double letters 
in the cipher text it was assumed 
that "STOP" might occur twice 
directly over one another. The 
framed part of the adjoining 
example might be taken as a 
favourable starting point. An 
attempt v/as made to carry on the 
letters "TEL” to form "tdldgramne" 
- the "£" in front might be 
"notre" or "votre", Tiwos 
attempts were therefore carried 
out. "M" appears twice in the 
cipher text. The more favourable case is shown in the example. 




E 

U 

X 

a 


After many attempts the diagonal transposition box was successfully 
recovered 


_5_ 

9 

1 

3 

14 

2 

7 

11 

13 

15 

6 

10 

12 

8 

4 

S 

D 

I 

T 

E 

N 

0 

T 

R 

E 

T 

E 

L 

E 

G 

R 

A 

u 

M 

a 

N 

R 

0 

X 

U 

N 

D 

N 

T 

R 

6 

i 

s 

Q 

0 

A 

m 

R 

E 

s 

T 

0 

P 

U 

N 

X 

D 

E 

U 

X 

E 

T 

E 

K 

s' 

T 

0 

.P 

R 

A 

s 

X 

s 

S 

a 

G 

i 

N 

& 

0 

L 

D 





Let me add that in this example it can no longer, of course, be a case 
of the original text. In the original text the words ".otre tAldgromne", 

"stop" occurred twice and the expression "SSGGINGOLD" occurred also; and 
these were again used. In this case only two diagonals occurred, 

Ty/o or three further massages with this indicator group were available, 
which could thus be broken. Here, too, the ending in "SSGGIHGOID" was 
repeated. "Sg" means "signfi" - S-G is repeated up to three times. Ingold 
is a name. 

In the further solutions of indicator groups successful use was again 
made of the mors or less frequent stereotyped beginnings and endings. Here 
very profitable use was made of messages of equal length and with the some 
indicator group. 
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The breaking of every ; ingle indicator group made great doaands on the 
endurance and zeal of the individual, for here only the most laborious stilly 
of details offers a prospect of success. 

Here let ass sum up ny experience in working on diagonal transposition. 
The first breaking of a diagonal transposition can bo considered a great 
piece of luck. If, however, something more is got out of this solution - 
such as, for example, stereotyped beginnings or endings, then that is really 
a big step forward. 

Thanks to the stereotyped passages we were able to carry out further 
work on the material frets Equatorial Africa with a certain amount of success 

The knowledge gained of the content of material from West Africa which 
also inclined towards stereotyped beginnings, Supplemented and simplified 
the analytical work here too to a not inconsiderable degree. 

Nevertheless breaking takes a very long tine. Whether working on 
diagonal transpositions from front-line traffics with, for example, a daily 
change of keyword, could still be called worth-while, seems to me very 
doubtful. 


The system mentioned on page 7, under No. 12, appeared for the first 
time about the middle of 1J43 in North Africa. By the roonths March-April 
1944 the system hnd been so far broken that the first messages could be 
•read. 

A numerical count of this material was put in hand. It turned out 
that the number "6” took up 14-1%, From this it could be concluded that 
it must be a case of a hatted code. 

The external characteristics of this system are aa followss- 


00075 

35035 

08483 59514 

37485 

. 

cipher text continue: 


1st group 

- lues sage number 


2nd group 

- number of groups 


3rd group 

- indicator group 


4th group 

- check group 


In every message it is seen that the reversed 4th group subtracted 
from the jrd group always produces the sane difference. 

In the present case thurafore; 


indicator group: 08483 

check group reversed; 41393 

A -«■ difference: 67998 

In the course of tine we got a number of cribs v/hich made further 
work possible and assisted it, although they did not supply any particular 
aids for obtaining a solution. 

Finally we got 5 messages with the same indicator group; all the 
messages were of different lengths, they all had the sane contents with a 
further addition. The last groyp of each message was always identical. 
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The following picture resulted after the 5 
by "sliding". 


nessages had boon arranged 
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On the basis of 
repetitions it was 
established that 
the foundation was a 
4/F Code, The red 
strokes (.#") show 
the delimitations of 
the individual oode 
groups 


—» length of message 1 
length of message 2 
length of message 3 
— length of uessage 4 
length of nossage 5 


By sliding" it was then established that the last group of each 

neacago was tav *.u» as woa laiei establislieu, jaea.it 

But this problem, shall be- explained nore fully by means cf a figure 
example 


Th© cipher texts of* the 5 messages run:- 


Message 1: 

00091 

1 ) 

,15325 . 

17017 

2) 

..J. 1,501.. 

08483 

3 ) 

07734 

59514 

37$ 10 

4) 

7,8163 

5) 

03682 


6 ) 

1282$ 

id}' 

93,121 

36581, 

- Tl) 

_ 7645,7_ 

V ' 
02589 

~^8T 

15250 

72765 , 36461 


67276, 




Message 2: 

00092 

,15325 

18018 
1,8501 

08483 

077,24 

59514 

37610 

71,816 

30323 


,82128 

26636 

581,62 

58915, 

6,5072 

7655,3 


Q&is- 

7,1217 

649.76 

7276,3 



Message 3 ; 

00093 
15325 

20020 

I895O 

08483 

1077,2 

59514 

6.4376 

10710 

,81630 


3.2^82 

1282,6 

3®365 

81,662 

58915, 

61,507 


2765,8 

03646 

19,701 

21764, 

91,767 

27638" 

Message 4 : 

00094 

,15325 

21021 

1,8935 

08483 

01077 

59514 

21,437 

6107,1 

68163 


,#75 

,82128 

J£56JJ 

6581,6 

62258 

91567 


,5072? 

J> 5,81,3 

64619, 

701,12 

17649 

10767 


27638 

-—yi'—r.JF; 





Message 5: 

00095 

15325 

67381 

6654?~ 

619,7° 

26026 

-J®973 

63032 

,25891 

318,12 

08483 

Q5010 

7827,8 

J6?08~ 

*17649 

59514 

77212 

21282, 

5,5072' 

1141,7 

91.437 

652Q6 

76581~ 

67.276 

61071 

36581, 

65,364 

38103 


Repeats of message 1 in the other Messages are bracketed and underlined. 










. If' the group "6153" '.is; assumed to be fixed, then oolwnns 2 and 7 would 
hnve to be adjacent (message 3 —, confirmation in message 5) « Further columns 
3 and 8, would have to be adjacent irimassage 4 - confirmation' message 2. If 
mcaaagB I XS lurraer compared'With message 5, we get the following numerical 
key:- 3. 8. 4. 1. 10. 9.'6. 2. 7. 11. 5. 

The appropriate keyword was recovered from the numerical key. I oan no 
longer roneniber what' it was. ; ‘ ■ 

■ • i .... 

An attempt;was made to explain the significance of the- indicator group 
and -tho check group;- 

i ' ■ ' ■ ‘ ■ ■. . 

. The French take the keyword from the code.. The 5th .digit might there¬ 
fore give the starting point'for the transposition. 

Example : - 

Suppose the code equivalent of a keyword used is 283k. Let the' 
starting point be 1. • 

Then the urireciphered indicator, group would read 28341. . 

The indicator group is• reciphered by .the addition of a constant five- 
digit number. • , . _ • ' . 


i 
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The check group•is derived from the addition of a second five-digit 
.number, to'28341. 


Exkmple : - 

*)' 


28341 
■ 801*42 

08483' (indicator group) 


28341 ■’ «) 

23254 

41595; (check'group reversed) 1 


. ^ . ..' (of, message example oh page 14) 

Here too, chance came, to our aid. • The two five-digit; numbers were 
' announced in a-.system we couia read (C 36). Thus we had the indicator 
■ groups "in clear"; , . ' .* ' • • « . 

.A statistical analysis of’ the ’code groups t that* had' appeared up till 
then.proved',beyond.' all doubt that the code equivalent was not entered in 
the cage, in .the. form "ABOD" but • in' the foiin " CDAB" (this-was'not carried •, ' 

out‘in .the case of'the-example given). ■ 

The pages in the, sixties were, especially numerous, so the natural 
. assumption,was that the numerals and amplifying'groups are to be found on 
these pages.. This assumption was further strengthened by the fact that 
tho statistical analysis of the decoded indicator groups showed these 
pages to be unused. , 

• There were available in the way of. captured documents a series of coles 
of similar construction." Specially notable in this .connection was the 
"ATM" "code, which must have been already in.use in North Africa.before the’ 
--war..' It. was perfectly obvious that.it could, not be, the same code. But 
jr it was possible to use the vocabulary.of this, code to an extraordinarily -. . 

^ great extent. Thus the(new code - it was named "ATE 43", as was dis- 
covered later from decoded messages. - could .be recovered with quite fe- ■ 
markable speed and worked on with good results. 1 

Later.the .indicator group technique for. this system was changed. . 

The position of the. indicator and the' aback- group varied with the length of ' 
the message. ■ ■ 

i ' • ■ . • . ’ '■ " • • .' 

The position of the indicator arid check groups was related to the-group 
giving, the number of groups. 5 v ' J . 


- Examples 


Nuiaber of groups 

30010 
11011 
, 12012 
13013 
20020 ■ . 

' 21021 i 


Position of indicator and, check group 
in positions- 1 and 2 


2 

3 

4 
2 . 
3. 


3 

4 

5 

3 

4 


The first and second digits of the number of groups are added, giving 
the position of, .the indicator group " ---■ ■ ' ■■ 1 

group ' / v ' - r ' 


the following group is,always the check 


■") .The satie difference iii all messages comes from subtraction of 
the constants, ■'( 

■ 80142' ' • , ! ■ 

■ 23254 " ., 

. . , 67996 (of. page 14) 
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The reciphement was as follows 

' 28341 28341 

10001 94520-; ' 

30332 '-12857 ' 


indicator group . 
date 10. 09. 1945 
+ '20 

30 ,(-September - 30 days) 


. Solution of this reciphement took an extremely long time;' success- 
finally came by "sliding” a short message. "Sliding", also called 
"dragging" was looked'on as a<last resort and was carried out by a largo 
staff; it finally brought succ'ess. ' . 

The system mentioned on page 7> under No. 13, is a 4/F code reciphered 
with a short subtractor, which was used on the Italian front_in the early, 
'days and was' captured there. Later the same code, turned lip in Prance too. 


Example 


0023 - 1717 ; 4543 - 1721 

cipher text continues '' ,,,,, 


group 1 
group 2 


message number 
number .of .groups 


■ . last group - indicator group. Digits 1 and 4 

give the same number, whioh 
indicates the subtracter. . 

Change of subtractor'took place weekly (?).,“ ■ _ • ' 

Within a key period, iO different subtractors' are. therefore possible. 

By the use of short subtractors, so many depths arose that, the breaking; 
of the subtractors presented no difficulties. -In this system, too,-we were 
helped (1) by.current knowledge of the message text; (2) by a series of 
stereotype messages. This system provided nothing-important by way of 
content. 

The system mentioned on. page 7, under No.. 14, _ is- a 4/P code reciphered • 
by means. of short subtracters, which was used in transport networks in North 
Africa. To begin with the volume of- traffic was very, large - and finally 
in the latter days fell away to only a few messages a month. 

The external, characteristics of the system were the same as those 
already described, in the previous system. 

.It was important for the breaking of the system that these transport 
reports had up till then been'given in plain language. The form of these 
reports was kept very stereotyped. 

Concerning our experiences in breaking 4/P codes with subtracter 
reciphement it can be said that for the most part it presents no special 
problems to cryptanalysis. At our station^vhen dealing with codes with 
subtraotor reciphement we always worked with catalogues of, differences 
which were drawn up in the. form of punched cards, with the 40-50 most, 
frequent code .groups as a basis. ,. ‘ 


Up’tU.1 the'middle of March 1945 we had not succeeded in breaking 
the system mentioned on page 7, under No. 15. Solution of this material 
seaned to me also very unlikely. 


ft 3 


1 
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Lot,'me' sum up in'the following .section the results and- experiences 
gained so far from working on this material. > . 

At the same-time and in.the name networks as.'the "ATM 43" had 
appeared, there were‘a few messages which did not-show the characteristic , ■ 
•difference of the "AM 4-3" hut a different -one. In the course of time 
the volume of traffic increased considerably. Two or throe cribs, turned • 1 

■ up, -of-which only one could be worked'on sufficiently to ,allow the key¬ 

word to be recovered. It could then be deduced from this that it was a 
hatted 5 /f code.- "■ 

It was interesting to note .here that an extraordinarily small 
number of cribs turned up; the first crib turned up after 1600 messages,; 
quite contrary to the previous situation'. ' - r 

The work was stopped. Some- time before the appearance of this 
system 5/P material had turnedup in traffic ■ between Corsica and North 

■ Africa.; it consisted of only about 80 messages.. . No. further material 
came in -later.-' This material was subjected to a brief .examination., • 

These 80 messages could be worked on. , It was. a case of a 5/E code which 
had been, transposed; It was a very _ primitive kind of transposition, 

Example of a key, of this type :- • 

10 , 11 , 12 , 13, 14, 15,.': 16, 17 , 4, 2 , 3 , 4, 5, 6 , 7, 8 ,'? - 

' As far as I -remember, the'keys changed,daily'. ■ 

Thus-these 80'messages 'could "be worked on sufficiently to reveal the 
'basic code groups. 

Interestingly enough'it -then turned out that the same ccd-e must be the 
'basis of both systems. 'At this point the examination of the material with 

- its 80 messages could be considered completed, , '' 

The material on which work had previously been suspended was taken-, in . 
hand again. No new cribs had turned up. Thanks to the newly found code 
groups of the above-mentioned 80 messages,, further study would have been - .' 
highly promising. So a new approach was'sought and found. Lot me now 
describe it - -I have not heard whether it. did finally lead to success. 

It was seen time and time, again tha t the cage, widths used in the re- * 
oiphermant must stand in some relationship to the message lengths, as it 
was reasonable to suppose that' certain maximum and minimum depths must be 
prescribed for the message cages. Likewise it laay be assumed that cipher 

- regulations strictly forbid so-oalled "full cages". Thus we can leave.out 

of-account "sliding" ■ of complete cages. Therefore, as'one has no cribs 

at one's disposal, one would have to try. "sliding" messages which have an 
overlength oF underlength of 1 or 2. Such oages then would, look like this : 




underlength of 1 


over length of 1 







Sliding such cages is not easy, claaancla untiring seal and very great 
powers of endurance. Here, too, a further difficulty uust be home' in 
mind, namely that the fixing of the cage width can only he clone ty calcu¬ 
lations or guess-work. 

Cage widths were calculated as follows: 

All messages with the sane indicator group wore osuwadaed to establish 
with what cage widths full cages would be produced - these cage widths' 
could then be discarded. As the indicator groups occurring most fre¬ 
quently wore taken as a starting point, it could be assumed with relatively 
groat certainty that the cage width so obtained was correct. 

Those experiments were carried out on as broad a basis as possible. 

The messages were most carefully selected. 

Unfortunately, owing to ay transfer X was no longer able to see the 
success or failure of these experiments, so that 1 cannot pass judgment on 
this n mi method. 

In the meantime a key change took place in this material. 

Example of n. message beginning :- 

00012 17033 16980 .. cipher text 

continues . 71389 

Group 1 - message rubber 

Group 2 - digits 1, 2, 3 give the message length 

digits 4, 5 belong to the indicator group 

Group 3 ) 

and last (or 4th) group ) - indicator groups, 

(I cannot now say whether the last-mentioned group stool in 4th or last 
place), 

The indicator groups produced the following pictures- 

169807 11 ) 

) 154-37 

138933 -5- 9 ) 

(Whether the order was 11, then 9, or the other way round I cannot now say). 

Among this material, two or throe cribs had turned up, work on which 

had brought no corresponding results. It was assumed that this new reci- 
pherue-nt is not only based on transposition but must also have been dona on 
a stencil in some way. Work on this set of problems had not been started 
in r;y time. 


] 


The French "AP" code oust be added as No, 16. This is a small 2/L 
code table, not completely filled in, which was used in front-line units. 
Code tables of this kind were captured. Judging from coir experience up 
to near, various even smallish units must have different code tables. 
Change of tables seemed to be carried out at least once every two days. 

It was onco possible to break the day's traffic of a unit on 20-30 
messages. 
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, Vm11 5a * general remarks can be undo about the French systems which I 
shall set down here at the end of my report to sum up r.y experiences. 

°m**sn in the West a number of French codes were captured 
appearS°n J h v°^ b t If TV°°^are -all these systems with those which 
Sewatiw Vb V' W f f nd that ths Frenchman is extraordinarily 

ZthlZ tSf ^ t °T ® tluotlon of his “iphor systems or rcciphering 

t!:™ A* * ,^i 0h n r t hav0 bcBn usea in the first world war (to 

a sli-htw J were USea during th0 °*BP*isn in the West and in 

a slightly modlfieu form up to 1945 in West Africa. 

As methods for reeiphering basic books there appear principally 

1 . subtraction with finite subtracters 

2. transposition, with keywords taken from the code. 

breakir' ^ ° f V! in S stereotyped message beginnings and endingsj 

. ,. _ as °f ton Slaa ® considerably easier by this. In describing the 
indiviuual systems, these features were,- of course, pointed out, 

idicst^orio!j f t-h3 U ? a b m& i tal ®f erienoe of mine is that the Frenchman has the 

cinhS JV es B °V ,e ® &ble tc sot OTay trom ‘ of offlwunicating 

in West Z Cy oh r?-’ QS by W**®. I'tos, through the diagonal system 

i J * ^ - Wero abl ° on S0VeraI occasions to break the key for the 

thrLw^'* 01 ^ ch '‘ Jng0 for the « code was announced, even 

though without, giving details, in this way, 

, 4 .. 1 ^. ha ® proved worthwhile to use Hollerith methods for laree-seale 

w< fV" e> 8* f or s «ttinc up catalogues of differences, polygram 
statistics_and the search for repeats. Statistical work on a smaller scale 
is more quickly done by hard. 


(Signed) HANS W. KHHiN 

Sonderfuehrer ( 2 ) 


(Trans. H.D.) 





